Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier: L/RZJLv8sw/1GKp8PtoiFagMQiTFinA3oZ4QBvWVPp0=
Subject key identifier: 95:96:9D:D2:5B:2C:1A:93:E7:BB:C1:CA:1F:F6:3A:7C:04:7D:9F:60
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial: 0196C15D70E258261B76520B685F892DD720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 22:00:48 +0000
Manifest this update: Sun 11 May 2025 22:00:48 +0000
Manifest next update: Mon 12 May 2025 22:00:48 +0000
Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: QJJD1SkeiqA6HEcigLWZxZFfwn/cr/kXCwsZo9H6gwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:70:e2:58:26:1b:76:52:0b:68:5f:89:2d:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Validity
Not Before: May 11 22:00:48 2025 GMT
Not After : May 12 22:00:48 2025 GMT
Subject: CN=95969dd25b2c1a93e7bbc1ca1ff63a7c047d9f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:31:24:b2:79:c0:a2:52:61:dd:c5:14:79:
6b:ab:ca:ed:b1:cf:c8:ba:b2:52:88:f5:08:56:33:
ad:c7:c8:6c:a9:f5:54:b1:2d:d5:59:e7:6f:36:4e:
49:11:39:9a:9b:85:ef:69:4e:7d:74:87:05:c6:b1:
b0:19:0c:cc:7d:26:21:f2:d9:c6:b5:54:cb:69:ce:
a4:bb:6b:55:02:c0:bd:22:be:b2:57:b1:05:ad:71:
4d:69:a9:97:67:46:0f:43:b8:d3:5e:55:89:e2:3a:
58:71:7e:72:3e:46:6e:41:b1:09:b2:57:ee:44:74:
95:16:82:20:e0:9d:43:0d:1e:86:b7:20:6e:2c:0f:
77:99:28:65:0d:c3:98:05:06:cf:4f:fa:b0:1f:72:
38:71:f6:03:63:77:23:48:5f:9d:35:d5:aa:1b:27:
ee:6f:fb:aa:df:b9:b0:92:87:31:1e:9d:10:b4:2a:
21:18:7b:0b:15:54:87:2f:4f:68:02:a5:bd:24:10:
37:9d:b3:1c:b2:59:37:2f:39:07:08:01:78:68:66:
3a:10:ea:47:1f:cc:39:88:51:a5:21:07:12:8c:83:
10:ba:4b:2d:0b:ba:d1:d8:ba:e5:5b:31:1b:c9:9a:
b2:38:0f:13:69:33:e2:70:1f:a1:a0:14:67:0c:35:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:9D:D2:5B:2C:1A:93:E7:BB:C1:CA:1F:F6:3A:7C:04:7D:9F:60
X509v3 Authority Key Identifier:
keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:00:9a:93:e4:3a:fd:c5:af:84:cb:e3:9c:fd:eb:82:e5:b0:
8c:e3:65:b3:af:fc:89:fd:05:85:7b:ef:f4:c3:05:96:b2:f5:
0c:27:e5:31:b5:7c:94:e1:d2:9e:03:ae:f0:df:2b:b8:5a:81:
01:0e:c6:7a:10:be:96:99:51:0a:3d:97:f5:2e:18:9b:3f:10:
1a:b4:c3:ba:36:4d:3f:05:69:ef:38:c1:e7:7d:bf:65:82:e2:
b4:b0:94:b2:ea:19:c0:74:de:6f:ee:e1:64:b3:89:92:a4:a5:
81:02:f0:ca:4a:e6:27:b0:e6:ab:db:56:e1:04:79:67:18:3f:
2f:8f:82:03:0a:61:c8:6d:e4:70:c6:0c:9a:5b:29:a8:36:42:
ef:1b:98:50:2a:9d:f7:95:83:a8:93:f8:09:a6:a2:28:cf:2e:
aa:e0:1d:05:d5:72:d5:d0:a8:6d:74:06:27:c9:ff:d3:84:25:
5d:30:1a:ca:2a:ee:e5:31:ba:b7:64:44:e0:5d:e1:49:bb:20:
f7:92:3c:67:84:d9:e9:4e:76:c1:d7:33:ef:44:55:a2:b4:64:
bd:33:6b:ec:a6:b4:44:d3:eb:69:d3:72:20:3f:b8:88:e4:18:
9f:45:de:16:0e:95:8d:f0:1a:7e:9a:03:e1:2e:8c:25:69:99:
72:a0:f0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:59:02 2025 by rpki-client